Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/0604fef4d0e3805f3afcee8e129346b9ca33c996.roa
File:                     0604fef4d0e3805f3afcee8e129346b9ca33c996.roa (raw, json)
Hash identifier:          JFoHjPIapiJTa0JOtAwXvH/KsJo215dKbRZEV0XxAaM=
Subject key identifier:   3C:9B:3A:6E:8A:50:93:1D:E6:EE:11:73:C7:45:0D:89:74:87:4D:79
Certificate issuer:       /CN=c3a770eb73a360a46fb7de855fc95e2bee83938c
Certificate serial:       0ADC
Authority key identifier: D4:AF:E8:DB:49:5A:D2:CA:5C:FA:40:D0:E9:37:17:9D:57:2B:05:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3a770eb73a360a46fb7de855fc95e2bee83938c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/0604fef4d0e3805f3afcee8e129346b9ca33c996.roa
Signing time:             Mon 01 Apr 2024 14:52:26 +0000
ROA not before:           Mon 01 Apr 2024 14:52:26 +0000
ROA not after:            Wed 01 Apr 2026 14:52:26 +0000
asID:                     270218
IP address blocks:        2806:401::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2780 (0xadc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a770eb73a360a46fb7de855fc95e2bee83938c
        Validity
            Not Before: Apr  1 14:52:26 2024 GMT
            Not After : Apr  1 14:52:26 2026 GMT
        Subject: CN=0604fef4d0e3805f3afcee8e129346b9ca33c996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:c4:be:ed:69:5c:11:15:b6:77:b8:de:2f:
                    f1:bd:ca:7f:66:2b:68:07:3c:eb:13:5c:0f:d3:91:
                    23:03:63:ed:72:cc:01:28:c0:29:31:c4:62:ed:10:
                    97:a6:39:c0:aa:83:54:a9:d2:61:dc:14:4b:47:d7:
                    78:4f:0a:72:3a:16:90:81:91:ac:e5:7a:db:98:f0:
                    80:1a:71:02:9a:9c:7c:06:c3:3d:e1:ab:a7:83:73:
                    23:02:eb:a1:21:d2:2e:7d:4b:4f:85:33:fa:c5:bd:
                    ed:80:9c:62:c1:4c:da:b7:23:0c:b0:f1:bc:d1:5c:
                    68:46:c7:d7:8f:cb:5d:96:51:d6:36:41:c4:b9:ec:
                    1a:d3:59:fc:79:4e:01:92:b3:44:e3:12:ac:e0:a3:
                    ee:bc:33:8d:97:69:ac:0c:0f:0b:92:a6:92:a6:39:
                    5b:66:af:5a:a7:68:8d:ec:6e:85:c8:21:8d:b0:95:
                    cd:77:7e:16:ba:80:db:cb:b9:d9:52:12:3d:49:b0:
                    37:8a:9e:a5:a6:34:39:9c:a6:d3:68:1e:01:36:23:
                    15:3e:16:d8:cc:a5:45:55:42:0c:9c:dc:44:63:5f:
                    8f:a3:e3:b3:e5:19:71:f1:65:b0:65:18:2f:75:a2:
                    06:91:18:cc:7e:0b:fe:d5:a4:e3:6b:b3:af:de:24:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9B:3A:6E:8A:50:93:1D:E6:EE:11:73:C7:45:0D:89:74:87:4D:79
            X509v3 Authority Key Identifier:
                keyid:D4:AF:E8:DB:49:5A:D2:CA:5C:FA:40:D0:E9:37:17:9D:57:2B:05:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3a770eb73a360a46fb7de855fc95e2bee83938c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/0604fef4d0e3805f3afcee8e129346b9ca33c996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/c3a770eb73a360a46fb7de855fc95e2bee83938c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:401::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:ef:17:6b:a8:f1:48:af:01:fe:cf:c2:e6:93:0c:e1:f0:
         7f:2b:49:9e:a2:6e:56:6a:88:dc:42:06:4c:a9:33:ee:75:c0:
         34:f2:ef:20:f0:82:f0:a4:a4:df:48:1a:a0:2a:6b:18:28:7c:
         1d:11:19:6a:5d:3a:86:af:54:80:7b:6c:4b:93:1b:9c:f5:ea:
         3f:e3:92:4c:b1:49:16:c7:1d:30:42:e8:ff:9f:cf:17:d3:f6:
         88:ca:c3:37:73:57:51:09:22:50:3c:d8:e3:80:44:92:4f:ab:
         6b:4b:94:c8:5b:67:1a:51:f7:4a:e3:2b:df:6d:15:cb:dd:0a:
         f5:b6:60:65:ec:1e:3d:3e:a4:92:2b:48:39:66:25:61:6e:7c:
         48:c7:c8:e0:b9:82:b5:43:63:4c:a2:6a:af:ac:91:c8:53:9e:
         72:a7:e0:c1:e2:f8:17:2a:b3:eb:c1:39:ac:21:21:89:b8:d4:
         27:a4:4d:54:97:74:c4:6a:cb:f9:ae:f3:66:34:56:e7:05:8e:
         7f:8c:2b:55:bb:1c:ff:6a:56:01:2f:f1:ed:46:69:e0:7b:74:
         86:f0:54:38:cf:21:be:9e:51:df:4a:ed:e7:3d:79:8a:10:ab:
         15:5d:11:8d:96:59:c2:de:1e:5c:af:29:fd:9b:18:4b:0f:42:
         41:5e:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----